Differences

This shows you the differences between two versions of the page.

--- openssl:ca [2023/10/13 14:11] – olaf
+++ openssl:ca [2023/10/13 20:14] (current) – olaf
@@ Line 63: / Line 63: @@
 DNS.2   = <dnsname2.mydomain.com>
 IP.1    = <aaa.bbb.ccc.ddd.eee>
+</code>
+Save it as <device_name>.<domain>.cfg
+=== Create a key and the Certificate Signing Request ===
+<code>
+openssl req -new -nodes -out <device_name>.<domain>.csr -newkey rsa:2048 -keyout <device_name>.<domain>.key -config <device_name>.<domain>.cfg
+</code>
+This creates two files: one with the key and one with the CSR.
+=== Create the certificate ===
+<code>
+openssl x509 -req -sha256 -CA <path_and_file_name_Root_CA_cert> -CAkey <path_and_file_name_Root_CA_key> -in <device_name>.<domain>.csr -out <device_name>.<domain>.crt -days 2920 -CAcreateserial -extensions req_ext -extfile <device_name>.<domain>.cfg
 </code>

OOKB - Olaf's Own Knowledge Base